REMARKS 



Claims 1-22 are still pending in this application. Reconsideration of the application is 
earnestly requested. The Examiner has rejected all claims 1-22 under section 103 in view of 
Hailpern, Tso and Trcka, Although the Examiner's arguments have been carefully considered. 
Applicant respectfully traverses these rejections as explained below^. 

The Present Invention 

As pointed out in the Reply filed December 7, 2004 antivirus software dovmloaded fi-om 
an antivirus scanning server runs on user's computers and collects virus data. A central server 
then collects such virus data from each user's computer, consolidates the virus data, and creates 
virus tracking information that may be viewed on a display by any party. The Examiner's 
attention is directed toward the remaining discussion of the present invention in that Reply; for 
brevity, it is not repeated here. 

The Cited Art Distinguished 

The two cited primary references, U.S. Patent No. 6,275,937 issued to Hailpern et al. 
(Hailpern) and U.S. Patent No. 6,088,803 issued to Tso et al (Tso), both describe a technique by 
which content downloaded from the Intemet is first scanned by antivirus software on a server 
before it reaches a user's computer. These references do not disclose actually scanning a user's 
computer. The present invention discloses and claims an actual scan of the user's computer with 
the results being sent back to a central server. Because the two cited references are 
fundamentally different from the presently claimed invention, it is not surprising that many of 
the claimed steps and elements are not present in the cited references as explained below. 

Hailpern address the problem of a user downloading data from the Intemet, and provides 
intermediate proxy servers located between a client computer and the Intemet. These 
intermediate proxy servers perform the antivirus scanning before data or programs from the 
Intemet arrive at a client computer. (Column 3, lines 5-15; column 4, lines 1-47). Hailpern does 
not disclose performing an actual scan of a client computer (see, e.g., column 9, lines 5-50). 

Similarly, Tso also addresses the problem of infected files being downloaded to an end- 
user machine from the Intemet (column 1, lines 48-54). The solution disclosed is to scan a data 
object at a network device before it reaches a client device (Figure 1; column 2, lines 16-25; lines 
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62-67). Tso does not disclose performing an actual scan of a client computer (see, e.g., column 6, 
lines 6-50; column 8, lines 33-44). 

Because both of these references do not actually scan any data or programs located on the 
client computer they cannot possibly disclose a scan log that details results of virus scanning on 
the client computer. A client computer might very well be infected with hundreds of computer 
viruses, but these intermediate scanning servers would never detect such viruses because they 
only scan content inbound coming over a network before it reaches the client computer. These 
references might be able to track the sources of computer viruses, but do not disclose real-time 
virus tracking and display of viruses on end-user computers. For example, the dangerous source 
database 2097 of Hailpern keeps track of where viruses come from over the hitemet, but does 
not keep track of where they exist on client computers. 

Claim 1 

The office action alleges that Hailpern teaches the second element of claim 1, namely, "at 
least one antivirus scanning server accessible via the distributed computer network, whereby the 
client users contact the server to facilitate virus scanning of the client computers ." But, because 
this reference only shows a proxy server that scans incoming content, it does not teach "virus 
scanning of the client computers." 

The office action alleges that Tso teaches the third element of claim 1, namely, " a scan 
log which is sent back from each client user detailing certain results of the virus scanning on 
each client computer ." But, because this reference only shows a network device 4 that scans 
incoming content from a network, it does not teach "results of the virus scanning on each client 
computer." 

The office action alleges that Tso teaches the fourth element of claim 1, namely, " a virus 
tracking server for receiving the scan log information from said client computers in real-time ." 
But, because this reference only shows a network device 4 that scans incoming content from a 
network, it does not teach "scan log information from said client computers." There is no scan 
log coming from the client computers. 

Claim 12 
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The office action alleges that Hailpern teaches the second step of claim 12, namely, 
" invoking the antivirus scanning program from a plurality of client users having potentially 
infected client computers ." But, because this reference only shows a proxy server that scans 
incoming content, it does not teach "invoking the antivirus scanning program from a plurality of 
client users." The antivirus scanning of Hailpern is invoked at the proxy server, not at the client 



The office action alleges that Tso teaches the third element of claim 12, namely, 
" generating a scan log from each scanned client computer and sending the scan log back from 
each client user, the scan log detailing certain results of the scanning program on each client 
computer ." But, because this reference only shows a network device 4 that scans incoming 
content from a network, it does not teach virus scanning on the client computer, generating a 
scan log and sending it back from the client computer. 

The office action alleges that Tso teaches the fourth element of claim 12, namely, 
" receiving the scan log information from said client computers in real-time via a virus tracking 
server associated with the distributed computer network ." But, because this reference only 
shows a network device 4 that scans incoming content from a network, it does not teach "scan 
log information from said client computers." There is no scan log coming from the client 
computers. 

For these reasons, it is respectfully noted that there is no prima facie case of obviousness, 
and it is requested that the rejection of claims 1-22 be withdrawn. Reconsideration of this 
apphcation and issuance of a Notice of Allowance at an early date are respectfiiUy requested. If 
the Examiner believes a telephone conference would in any way expedite prosecution, please do 
not hesitate to telephone the undersigned at (612) 252-3330, 



Beyer Weaver & Thomas, LLP 
P.O. Box 778 
Berkeley, CA 94704-0778 
Telephone: (612)252-3330 
Facsimile: (612) 825-6304 



computer. 
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